Method and apparatus for rendering user accounts portable

ABSTRACT

Improved approaches for enabling user accounts to be portable across different multi-user computer systems are disclosed. A user account created at a multi-user computer can be stored to an external, portable data store, thereby rendering the user account portable. The multi-user computer system, e.g., through its operating system, locates user accounts on not only in local storage of the multi-user computer system, but also in any removable data storage attached to the multi-user computer system. Hence, by coupling the external, portable data store to another multi-user computer, a user is able to login to any supporting multi-user computer and be presented with their user configuration and user directory. Since the data store that stores the user account is not only external but also portable, a user can simply tote the data store to the location of different multi-user computers. In one embodiment, the external, portable data store can not only store the user account but can also provide general data storage. In another embodiment, the external, portable data store can be a portion of a portable computing device (e.g., media player) that provides other functionality besides data storage.

This application is a continuation application and claims priority underUSC § 120 to U.S. application Ser. No. 11/512,848, which is a divisionalapplication of U.S. patent application Ser. No. 10/304,291, filed Nov.25, 2002 (now U.S. Pat. No. 7,120,785) entitled “Method and Apparatusfor Rendering User Accounts Portable,” which is hereby incorporated byreference.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates generally to multi-user computer systemsand, more particularly, user account management for multi-user computersystems.

2. Description of the Related Art

Multi-user computer systems allow a single computer to support one of anumber of different users. In particular, when a user desires to utilizethe computer system, the computer system requires that the user login tothe computer system. The login process enables the computer system todetermine whether the user that is requesting to use the computer systemis able to authenticate themselves as an authorized user of the computersystem. If the login is successful, the user is able to use the computersystem to gain access to various resources either stored locally or on anetwork to which the computer system is coupled as permitted by a useraccount. For each user account, the multi-user computer system canprovide a separate environment such that different preferences,directories etc. are used for different users such that restrictions onaccessing other user's personal space can be imposed.

Conventionally, a user account is stored locally within the multi-usercomputer and a user's personal space (e.g., user directory) for the useris also stored locally. Hence, one problem associated with suchconventional approaches is that the user accounts and user directoriesare provided on local storage of the multi-user computer. While suchprovides for multi-user support, the user accounts are thus specific tothe multi-user computer and stored thereon. Consequently, the useraccounts are not portable. For example, a conventional operating system,such as Mac OS X, provides for multi-user support but all user accountsthat are created are stored locally in a netinfo database and also havea default user directories hosted on local storage.

A few sophisticated users have modified operation of existing operatingsystems, such as Mac OS X, to provide some portability to their useraccount from a work computer to a home computer. This requiresspecialized software tools to manipulate and modify the data structuresfor a user account in a database (e.g., netinfo database). Armed withsuch specialized tools, a very sophisticated user would first establisha local user account on the multi-user computer (work computer), andthen use the specialized tools to edit the location of the default userdirectory, such that it is made to reside on an external storage device.Then, at the other location where a multi-user computer (home computer)is to be used by the same user, a user account would be againestablished on such a machine, and then using special tools to renderthe user identifier the same as that which the work computer used whencreating the user account at the work computer. These modifications tothe multi-user computers are not intended modifications and thus tend tocompromise the reliability of the operation of the multi-user computers.Further, the required specialized tools, although available, are neitherwell documented nor user-friendly.

Thus, there is a need for improved techniques to enable user accounts tobe portable such that a user can carry their user account with them andlogin to any multi-user computer system that supports portable useraccounts.

SUMMARY OF THE INVENTION

The invention relates to improved approaches for enabling user accountsto be portable across different multi-user computer systems. A useraccount can be stored to an external, portable data store, and thus theuser account becomes portable. Hence, by coupling the external, portabledata store to another multi-user computer system, a user is able tologin to any supporting multi-user computer system and be presented withtheir user configuration and user directory. Since the data store thatstores the user account is not only external but also portable, a usercan simply tote the data store to the location of the multi-usercomputer system. In one embodiment, the external, portable data store isable to be coupled to the multi-user computer system for data transferthere between.

The external, portable data store can merely provide data storage or canbe a portion of a portable computing device that provides otherfunctionality besides data storage. One example of a portable computingdevice is a media player.

The invention can be implemented in numerous ways, including as amethod, system, device, apparatus, or computer readable medium. Severalembodiments of the invention are discussed below.

As a method for configuring a multi-user computer system for use by aregistered user, the multi-user computer system including at least aprocessor, an operating system, a display device and a local data store,one embodiment of the invention includes at least the acts of:retrieving available user accounts pertaining to registered users, atleast one of the available user accounts being from the local data storethat is within the multi-user computer system and at least another ofthe available user accounts being from an external data store that isexternal to the multi-user computer system; presenting a representationof the retrieved available user accounts on the display device of themulti-user computer system; receiving a selection of one of theretrieved available user accounts by the registered user; authenticatingthe registered user as authorized for use of the selected one of theretrieved available user accounts; and configuring the multi-usercomputer system in accordance with the selected one of the retrievedavailable user accounts for use by the registered user.

As a method for establishing a portable user account for a user on amulti-user computer system, one embodiment of the invention includes atleast: receiving account information for the user; producing an accountrecord based on at least the account information; storing the accountrecord to a portable data store, the portable data store being separateand apart from the multi-user computer system yet operativelyconnectable with the multi-user computer system; and creating a defaultfolder for the user on the external data store.

As a method for establishing a user account for a user on a multi-usercomputer system, one embodiment includes at least the acts of: receivingaccount information for the user; displaying a list of available datastores on which the user account can be created, the list of availabledata stores including at least one internal data store and at least oneexternal data store; receiving a selection of one of the available datastores; producing an account record based on at least the accountinformation; and storing the account record to the selected one of theavailable data stores.

As a computer readable medium including at least computer program codefor configuring a multi-user computer system for use by a registereduser, the multi-user computer system including at least a processor, anoperating system, a display device and a local data store, oneembodiment of the invention includes at least: computer program code forretrieving available user accounts pertaining to registered users, atleast one of the available user accounts being from the local data storethat is within the multi-user computer system and at least another ofthe available user accounts being from a portable data store that isconnectable to the multi-user computer system; computer program code forpresenting a representation of the retrieved available user accounts onthe display device of the multi-user computer system; computer programcode for receiving a selection of one of the retrieved available useraccounts by the registered user; computer program code forauthenticating the registered user as authorized for use of the selectedone of the retrieved available user accounts; and computer program codefor configuring the multi-user computer system in accordance with theselected one of the retrieved available user accounts for use by theregistered user.

As a computer readable medium including at least computer program codefor establishing a portable user account for a user on a multi-usercomputer system, one embodiment of the invention includes at least:computer program code for receiving account information for the user;computer program code for producing an account record based on at leastthe account information; computer program code for storing the accountrecord to a portable data store, the portable data store being separateand apart from the multi-user computer system yet operativelyconnectable with the multi-user computer system; and computer programcode for creating a default folder for the user on the external datastore.

As a computer readable medium including at least computer program codefor establishing a user account for a user on a multi-user computersystem, one embodiment of the invention includes at least: computerprogram code for receiving account information for the user; computerprogram code for displaying a list of available data stores on which theuser account can be created, the list of available data stores includingat least one local data store and at least one portable data store;computer program code for receiving a selection of one of the availabledata stores; computer program code for producing an account record basedon at least the account information; and computer program code forstoring the account record to the selected one of the available datastores.

As a multi-user computer system, one embodiment of the inventionincludes at least an external data storage device and a multi-usercomputer. The external data storage device is removable from themulti-user computer and portable. The multi-user computer has anoperating system that includes at least an account creation module and alogin module. The account creation module permits new user accounts tobe created and stored to the external storage device. The login modulepermits login with respect to users having their user accounts stored tothe external data storage device.

Other aspects and advantages of the invention will become apparent fromthe following detailed description, taken in conjunction with theaccompanying drawings, illustrating by way of example the principles ofthe invention.

BRIEF DESCRIPTION OF THE DRAWINGS

The present invention is illustrated by way of example, and not by wayof limitation, in the figures of the accompanying drawings and in whichlike reference numerals refer to similar elements and in which:

FIG. 1 is a simplified block diagram of a multi-user computer systemaccording to one embodiment of the invention.

FIG. 2 is a flow diagram of user account creation processing accordingto one embodiment of the invention.

FIG. 3 is a flow diagram of user login processing according to oneembodiment of the invention.

FIG. 4 is a block diagram of a representative media player suitable foruse as an external data store in accordance with one embodiment.

DETAILED DESCRIPTION OF THE INVENTION

The invention relates to improved approaches for enabling user accountsto be portable across different multi-user computer systems. A useraccount created at a multi-user computer can be stored to an external,portable data store, and thus the user account becomes portable. Themulti-user computer system, e.g., through its operating system, locatesuser accounts on not only in local storage of the multi-user computersystem, but also in any removable data storage attached to themulti-user computer system. Hence, by coupling the external, portabledata store to another multi-user computer, a user is able to login toany supporting multi-user computer and be presented with their userconfiguration and user directory. Since the data store that stores theuser account is not only external but also portable, a user can simplytote the data store to the location of different multi-user computers.In one embodiment, the external, portable data store can not only storethe user account but can also provide general data storage.

The external, portable data store can merely provide data storage or canbe a portion of a portable computing device that provides otherfunctionality besides data storage. One example of a portable computingdevice is a media player.

Embodiments of the invention are discussed below with reference to FIGS.1-4. However, those skilled in the art will readily appreciate that thedetailed description given herein with respect to these figures is forexplanatory purposes as the invention extends beyond these limitedembodiments.

FIG. 1 is a simplified block diagram of a multi-user computer system 100according to one embodiment of the invention. The multi-user computersystem 100 includes a multi-user computer 102 and an external datastorage device 104. The external data storage device 104 is typically aportable storage device that can couple to the local computer 102 over atemporary link 106. The temporary link 106 can be a peripheral bus(e.g., FIREWIRE, Universal Serial Bus (USB)). A cable can be used toprovide the electrical connections for the temporary link 106. Althoughnot specifically illustrated in FIG. 1, the multi-user computer 102includes conventional hardware associated with a computer, namely, amicroprocessor, semiconductor memory storage, peripheral bus controller,peripheral ports, disk drives, display device, etc. As the simplifiedillustration in FIG. 1 indicates, the multi-user computer 102 alsoincludes an operating system 108. The operating system is typicallyexecuted by the microprocessor to control basic operations of themulti-user computer 102. The operating system 108, besides variousconventional modules, includes an account creation module 110 and alogin module 112. The account creation module 110 allows users to createaccounts for use of the multi-user computer 102. According to theinvention, these user accounts can reside either internal to (or within)the multi-user computer 102 or external to the multi-user computer 102.In one embodiment, the internal (or local) user accounts reside within alocal database 114 hosted by the multi-user computer 102. In oneembodiment, the external user accounts reside on the external datastorage device 106, such as within an account file 116. The login module112 allows a user to log into any of the previously created useraccounts, regardless of whether such accounts are stored locally withinthe multi-user computer 102 (e.g., stored within the local database 114)or externally in the external data storage device 104 (e.g., stored inthe account file 116).

The external data storage device 104 provides portable data storage.That is, the external data storage device 104 is highly portable andable to be temporarily connected to different multi-user computers.Examples of external data storage devices include: portable data storagedevice, media player with data storage, and data storage drive (e.g.,FIREWIRE drive). The term “media player” generally refers to computingdevices that are dedicated to processing media such as audio, video orother images. Hence, the external data storage device 104 can becontained within a device that provides additional functions orcapabilities beyond data storage. Often the external data storage device104 is hand-held (or pocket-sized) or smaller to increase itsportability. Although the external data storage device is noted as beingexternal to the multi-user computer, the external data storage devicecan, in certain embodiments, plug into a socket, port or bay of themulti-user computer.

FIG. 2 is a flow diagram of user account creation processing 200according to one embodiment of the invention. The user account creationprocessing 200 operates to create a new account for a user with respectto a multi-user computer system. Hence, the user account creationprocessing 200 is invoked when a new user account is to be created.

Once invoked, the user account creation processing 200 displays 202 anaccount information request screen. The account information requestscreen requests that the user enter information for the account thatthey wish to establish with respect to the multi-user computer system.The account information that might be requested from the user caninclude a user name, a password, password hint, and one or more userpreferences (e.g., picture, background, etc.). A decision 204 thendetermines whether the account information has been received. In otherwords, once the account information request screen is displayed 202, theuser is requested to provide the account information by completing theentries of the account information request screen and then submittingthe information. Hence, the decision 204 determines whether the user hascompleted the account information screen and submitted the requestedinformation. When the decision 204 determines that the accountinformation has not been received, then the user account creationprocessing 200 awaits receipt of the account information.

On the other hand, once the decision 204 determines that the accountinformation has been received, then the user account creation processing200 continues. Namely, an account volume request screen is thendisplayed 206. In one embodiment, the account volume request screendisplays a list of available volumes associated with the multi-usercomputer system. The volumes pertain to regions of data storage devices(e.g., disk drives). The volumes are often associated with differentdata storage devices. The available account volumes include not onlylocal volumes that are internal to the multi-user computer system butalso external volumes that are remote with respect to the multi-usercomputer system. Since the external volumes are remote from themulti-user computer system, the external volumes are able to be coupledto the multi-user computer system, such as through a peripheral bus. Theexternal volumes can also be considered to be hosted by portable datastorage devices. Examples of portable data storage devices includeexternal disk drives and external media devices that provide datastorage.

Next, a decision 208 determines whether a volume has been selected.Here, the decision 208, in accordance with one embodiment, can determinewhether one of the available volumes that has been displayed by theaccount volume request screen has been selected. When the decision 208determines that a volume has not yet been selected, the user accountcreation processing 200 awaits such a selection.

Alternatively, when the decision 208 determines that a volume has beenselected, then a decision 210 determines whether the selected volume isan external volume. When the decision 210 determines that the selectedvolume is not an external volume, the selected volume is thus aninternal volume.

When the selected volume is an internal volume, the user accountcreation processing 200 produces 212 an account record in a localdatabase format. The account record includes the account information ora portion thereof that has been provided by the user together with otheraccount information generated by the system. For example, the accountrecord might include a user name, a password (in an encrypted format), auser identifier, a password hint, at least one user preference (e.g., auser picture), and a home directory (default directory). The useridentifier and the home directory are system-provided. After the accountrecord has been produced 212, the account record is stored 214 to alocal database. The local database is provided within the multi-usercomputer system and serves to store account data for one or more usersassociated with the multi-user computer system. Further, a home folderis created 216 on the selected volume. Often, the selected volume is abase volume. The base volume is an internal volume for the multi-usercomputer system. In one embodiment, the base volume is a boot volumethat is utilized by the multi-user computer system when booting up.

On the other hand, when the decision 210 determines that the selectedvolume is an external volume, then an account record is produced 218 ina flat file format. The account record is then stored 220 to theexternal volume (which is the selected volume). Further, a home folderis created 222 on the external volume.

Hence, following the operation 216, the new user account has beencreated on an internal volume of the multi-user computer system, andfollowing the operation 222, the new user account is created on theexternal volume that is separate and apart from the multi-user computersystem (though capable of coupling thereto). In any case, followingeither the operation 216 or the operation 222, the user account creationprocessing 200 is complete and ends.

In one embodiment, the account record with the flat file format is amarkup language document that contains name-value pairs for the accountinformation. As an example, such a markup language document can be aextensible Markup Language (XML) document. In one embodiment, the localdatabase that stores account information can be a netinfo database asused by Mac OS X from Apple Computer, Inc.

FIG. 3 is a flow diagram of user login processing 300 according to oneembodiment of the invention. The user login processing 300 is performedwhen a user of a multi-user computer system attempts to log into thesystem to gain access to resources provided therein. In general, for auser to log into the system, the user must have a user account with thesystem. As an example, a user account can be created with the systemusing the user account creation processing 200 discussed above withrespect to FIG. 2.

In any case, the user login processing 300 initially retrieves 302 useraccount records from a local database. Each user account record pertainsto a different user of the system. In one embodiment the local databaseis provided within the multi-user computer system and stores accountrecords for one or more users. These account records, however, pertainonly to those user accounts that utilize an internal volume for storageof the account records.

Following the retrieval 302 of the user account records from the localdatabase, a decision 304 determines whether one or more external volumesare accessible to the multi-user computer system. As noted above withrespect to FIG. 2, user account records can be stored on externalvolumes so as to provide portability of such user accounts. Hence, thedecision 304 determines whether any external volumes are present. Whenthe decision 304 determines that one or more external volumes arepresent, then user account records are retrieved 306 from the one ormore external volumes. Here, the external volumes are typically portableor removable with respect to the multi-user computer system; hence, inorder to retrieve user account records from an external volume, theexternal volume must be operatively connected to the multi-user computersystem. Typically, a cable or other link is utilized to connect astorage device hosting the external volume to the multi-user computersystem. In one embodiment, the link is a peripheral bus, such as aFIREWIRE bus or a Universal Serial Bus (USB) provided over a cable.Alternatively, when the decision 304 determines that there are noexternal volumes present, then the operation 306 is bypassed.

Following the operation 306 or its being bypassed, available useraccounts are then displayed 308. The available user accounts includethose user accounts retrieved from internal volumes as well as thoseuser accounts retrieved from external volumes. By displaying 308 all ofthe available user accounts, the user is given the option of selectingany one of the available user accounts to be utilized during a login. Inone embodiment, those available user accounts that are stored toexternal volumes are distinguishably displayed from those of the useraccounts that are from internal volumes. As an example, available useraccounts from external volumes can be displayed such that each has anadditional icon displayed proximate thereto. However, various other wayscan be utilized to distinguishably display those of the available useraccounts that are from external volumes.

Next, a decision 310 determines whether an account selection and apassword have been received. The account selection is a selection of oneof the available user accounts being displayed 308. When the decision310 determines that an account selection and password have not yet beenreceived, the user login processing 300 can await such information.Here, in order to enable the user to log into the multi-user computersystem, the user must select one of the available user accounts andprovide at least a password in order to gain access to that useraccount. Often, a user name is also needed for the user to gain accessto a user account. When the decision 310 determines that an accountselection and a password have not yet been received, then the user loginprocessing 300 awaits such information. Once the decision 310 determinesthat one of the available user accounts has been selected and a password(and perhaps user name) for entry into that user account have beenreceived, then the user is authenticated 312. Here, the user isauthenticated typically by at least the password and often by both thepassword and user name. When the multi-user computer system determinesthat the user is authenticated through use of the password and/or username, then the user is deemed authenticated 312. In the event that theuser is not authenticated, then the user login processing 300 would denythe user access to the selected user account. However, as illustrated inFIG. 3, after the user has been authenticated 312 (which is assumed tobe successful), a system environment for the multi-user computer systemis configured 314. The configuration of the system environment can, forexample, set a user identifier to that value associated with theselected user account, set the user's preferences, and establish theuser directory (home directory). Hence, the system environment isdependent on the selected user account that a user has successfullylogged into.

As noted above, the external data store can be a portable media playerhaving data storage capabilities. FIG. 4 is a block diagram of arepresentative media player 400 suitable for use as an external datastore in accordance with one embodiment. The media player 400 includes aprocessor 402 that pertains to a microprocessor or controller forcontrolling the overall operation of the media player 400. The mediaplayer 400 stores media data pertaining to media items in a file system404 and a cache 406. The file system 404 is typically a storage disk ora plurality of disks. The file system 404 typically provides highcapacity storage capability for the media player 400. However, since theaccess time to the file system 404 is relatively slow, the media player400 can also include a cache 406. The cache 406 is, for example,Random-Access Memory (RAM) provided by semiconductor memory. Therelative access time to the cache 406 is substantially shorter than forthe file system 404. However, the cache 406 does not have the largestorage capacity of the file system 404. Further, the file system 404,when active, consumes more power than does the cache 406. The powerconsumption is particularly important when the media player 400 is aportable media player that is powered by a battery (not shown). The filesystem 404 can also store one or more user accounts (portable useraccounts) and store user folders, directories or files. In general, thefile system 404 acts as a data store. In one embodiment, the file system404 is provided by a disk drive. The media player 400 also includes aRAM 420 and a Read-Only Memory (ROM) 422. The ROM 422 can storeprograms, utilities or processes to be executed in a non-volatilemanner. The RAM 420 provides volatile data storage, such as for thecache 406.

The media player 400 also includes a user input device 408 that allows auser of the media player 400 to interact with the media player 400. Forexample, the user input device 408 can take a variety of forms, such asa button, keypad, dial, etc. Still further, the media player 400includes a display 410 (screen display) that can be controlled by theprocessor 402 to display information to the user. A data bus 411 canfacilitate data transfer between at least the file system 404, the cache406, the processor 402, and the CODEC 412.

In one embodiment, the media player 400 serves to store a plurality ofmedia items (e.g., songs) in the file system 404. When a user desires tohave the media player play a particular media item, a list of availablemedia items is displayed on the display 410. Then, using the user inputdevice 408, a user can select one of the available media items. Theprocessor 402, upon receiving a selection of a particular media item,supplies the media data (e.g., audio file) for the particular media itemto a coder/decoder (CODEC) 412. The CODEC 412 then produces analogoutput signals for a speaker 414. The speaker 414 can be a speakerinternal to the media player 400 or external to the media player 400.For example, headphones or earphones that connect to the media player400 would be considered an external speaker.

The media player 400 also includes a bus interface 416 that couples to adata link 418. The data link 418 allows the media player 400 to coupleto a host computer. In one embodiment, the data link 418 pertains to aFIREWIRE bus or a Universal Serial Bus (USB).

The various aspects or features of the invention described above can beused alone or in various combinations. The invention is preferablyimplemented by a combination of hardware and software, but can also beimplemented in either hardware or software. The invention can also beembodied as computer readable code on a computer readable medium. Thecomputer readable medium is any data storage device that can store datawhich can thereafter be read by a computer system. Examples of thecomputer readable medium include read-only memory, random-access memory,CD-ROMs, DVDs, magnetic tape, optical data storage devices, and carrierwaves. The computer readable medium can also be distributed overnetwork-coupled computer systems so that the computer readable code isstored and executed in a distributed fashion.

The advantages of the invention are numerous. Different embodiments orimplementations may yield one or more of the following advantages. Itshould be noted that this is not an exhaustive list and there may beother advantages which are not described herein. One advantage of theinvention is that a user is able to carry an external storage device toany multi-user computer system that supports the external storage deviceand then log into to the system in an ordinary manner to gain access togeneral and user-specific resources as if it were the user's personalsystem. Another advantage of the invention is that user accounts formulti-user computer systems can be stored on external storage devices.Still another advantage of the invention is that external storagedevices can serve other purposes besides user account storage and/or bepart of devices having additional functions and capabilities.

The many features and advantages of the present invention are apparentfrom the written description, and thus, it is intended by the appendedclaims to cover all such features and advantages of the invention.Further, since numerous modifications and changes will readily occur tothose skilled in the art, it is not desired to limit the invention tothe exact construction and operation as illustrated and described.Hence, all suitable modifications and equivalents may be resorted to asfalling within the scope of the invention.

1. A method comprising: storing, on a portable data store, an accountrecord for a first user, wherein the portable data store is capable ofbeing operatively coupled with a first multi-user computer system and isfurther capable of being disconnected from the first multi-user computersystem and operatively coupled to a second multi-user computer system;creating, on the portable data store, a default folder for the firstuser; storing, on a local data store in the first multi-user computersystem, an account record for a second user; and creating, on the localdata store, a default folder for the second user.
 2. The method of claim1, further comprising: producing the account record for the first userbased upon account information received for the first user.
 3. Themethod of claim 1, wherein the account record for the first user is in aflat file format.
 4. The method of claim 1, wherein the account recordfor the first user comprises a markup language document.
 5. The methodof claim 1, wherein the account record for the first user includes auser name, user identifier, encrypted password, and default directory.6. The method of claim 1, wherein the portable data store comprises adisk storage medium.
 7. The method of claim 1, wherein the portable datastore is part of a portable media player.
 8. The method of claim 1,wherein the portable data store is capable of being coupled to the firstmulti-user computer system over a peripheral link.
 9. The method ofclaim 8, wherein the peripheral link is supported by a detachable cable.10. The method of claim 9, wherein the peripheral link is a FIREWIREbus, and wherein the detachable cable is a FIREWIRE cable.
 11. Anapparatus comprising: means for storing, on a portable data store, anaccount record for a first user, wherein the portable data store iscapable of being operatively coupled with a first multi-user computersystem and is further capable of being disconnected from the firstmulti-user computer system and operatively coupled to a secondmulti-user computer system; means for creating, on the portable datastore, a default folder for the first user; means for storing, on alocal data store in the first multi-user computer system, an accountrecord for a second user; and means for creating, on the local datastore, a default folder for the second user.
 12. The apparatus of claim11, further comprising: means for producing the account record for thefirst user based upon account information received for the first user.13. The apparatus of claim 11, wherein the account record for the firstuser is in a flat file format.
 14. The apparatus of claim 11, whereinthe account record for the first user comprises a markup languagedocument.
 15. The apparatus of claim 11, wherein the account record forthe first user includes a user name, user identifier, encryptedpassword, and default directory.
 16. The apparatus of claim 11, whereinthe portable data store comprises a disk storage medium.
 17. Theapparatus of claim 11, wherein the portable data store is part of aportable media player.
 18. The apparatus of claim 11, wherein theportable data store is capable of being coupled to the first multi-usercomputer system over a peripheral link.
 19. The apparatus of claim 18,wherein the peripheral link is supported by a detachable cable.
 20. Aprogram storage device readable by a machine and tangibly embodying aprogram of instructions executable by the machine, the program ofinstructions comprising: storing, on a portable data store, an accountrecord for a first user, wherein the portable data store is capable ofbeing operatively coupled with a first multi-user computer system and isfurther capable of being disconnected from the first multi-user computersystem and operatively coupled to a second multi-user computer system;creating, on the portable data store, a default folder for the firstuser; storing, on a local data store in the first multi-user computersystem, an account record for a second user; and creating, on the localdata store, a default folder for the second user.